[quake3-bugzilla] [Bug 5051] New: Q_strncpyz with destsize < 1 can happen in GraphicsOptions_GetAspectRatios of ui_video.c

bugzilla-daemon at icculus.org bugzilla-daemon at icculus.org
Sun Jun 19 02:25:28 EDT 2011


https://bugzilla.icculus.org/show_bug.cgi?id=5051

           Summary: Q_strncpyz with destsize < 1 can happen in
                    GraphicsOptions_GetAspectRatios of ui_video.c
           Product: ioquake3
           Version: unspecified
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P3
         Component: Misc
        AssignedTo: zakk at icculus.org
        ReportedBy: ensiform at gmail.com
         QAContact: quake3-bugzilla at icculus.org


If you open and close the system menu several times then try to reopen it, the
line x = strchr( resolutions[r], 'x' ) + 1; can/will be a null pointer and thus
the following line of Q_strncpyz( str, resolutions[r], x-resolutions[r] );
results in a destsize being < 1.

-- 
Configure bugmail: https://bugzilla.icculus.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.


More information about the quake3-bugzilla mailing list